For those who aren’t aware; this coming Tuesday 10th March 2009 is Patch Tuesday: Patch Tuesday is the day when Microsoft release the month’s round of security patches for its Windows operating system(s).

Microsoft have today planned to ship three security bulletins for software vulnerabilities. One of these carries a “Critical” rating, affects all versions of Windows, and covers (a) flaw(s) that could be exploited to launch remote code execution attacks. Further details can be found in Microsoft’s advance notification.

Here I’m going to spout on about one of my favourite security; or should I say “lack of security”, subjects: That being running obsolete Windows operating systems: –

I, as others, currently refer to the obsolete operating systems as “Win 9x” : This list currently includes Windows 95, Windows 98 and 98SE, and Windows ME.

This vulnerability, mentioned and rated “critical” by Microsoft, affects ALL versions of Windows, including Win 9x: The problem is that, since all of Win 9x are now obsolete; Microsoft aren’t supporting or providing critical updates for Win 9x. Therefore if you’re hanging on to any Win 9x version and using it as the main operating system on your computer, you’ll be an open target for the malware masters, and if they choose to run code on your unprotected computer then there’s nothing you can do about it.

Maybe, just maybe, it hasn’t happened yet, and you’ve got away with it so far; or at least you think that you have. More than likely, though, you don’t realise that your computer that’s running Win 9x is working in a botnet, relaying spam, porn, and lots of other nasties, infecting other people’s computers, and under the control of criminals.

Yes it may well be that you don’t see why you should have to fork out for a new operating system, and maybe a new computer too that’s capable of running the new operating system; but think carefully: Even if you’re not the least bit concerned on the effect that your spam/virus relay is having on the rest of the internet community, and even if you never entered your bank account details into the computer so that they can be harvested and used by villains, remember that your ISP is probably watching your internet traffic: So whether or not you realise that you’re relaying spam, child pornography, and malware; your ISP is aware and you may be hearing from them and other legal authorities fairly soon.

Maybe you’re so far totally innocent and unaware that you’re allowing your box to be involved in criminal activities? Maybe you’ll end up having to prove that to your ISP and the authorities? Maybe you’ll end up on the wrong side of the law? It’s a high price to pay for saving a few groats right now; wouldn’t you agree?

Penultimately, I’ll mention that there’s something of importance that the softies have either forgotten to include in their patches this coming Tuesday, or haven’t yet developed; and that’s a fix for a vulnerability where a rigged Excel file can execute code via Microsoft Office. This vulnerability is already being exploited, and could do with patching fast. See this article.

And finally; for those who are still living dangerously in the past without adequate protection due to their tight-fistedness and refusal to purchase a supported operating system; Windows 7 is going to be released soon. I suggest that you run the free release candidate for now, if you can, and then purchase the RTM when it’s released. Yes it may well mean that you need to purchase or build a new computer; but is it really worth the risks involved in running Win 9x?

Addendum: While we’re on the subject of the March Patch Tuesday; I’ll throw in the URL to this article for your further reading.

November 1st is, surprisingly, the first day of the month (Not much gets past me!): Here are the percentages of users, out of a total numerous original visitors since July 2008, who are using a certain one of a number of various operating systems. (There is a reason why I’m presenting these figures, which will become evident further down.):-

(The percentages are rounded off to the nearest full 0.1 percentage point above the actual decimalised percentage points less than 0.1; which is why the total percentage figure adds up to a fraction just under 100%.)

24838 of my (original) visitors were using Windows: That’s approximately 92.5%.

1124 of my (original) visitors were using a Mac: That’s approximately 4.1%.

764 of my (original) visitors were using Linux: That’s approximately 3.1%

I want to deal with Windows specifically from this point. No favouritism intended; and well done to the Mac users – That’s a fairly good figure, which demonstrates that the Apple community is growing. Well done also to the Linux users: A figure of 3.1% shows that Linux usage is increasing – Great news for the open-source community.

Windows users; all 92.5% of you: You’ve proved some things to my mind. I want to share them with you. I have touched on some of them before in previous statistical reports that I’ve presented:-

I feel that 3 months of usage statistics in the latter-half of the year is an ample sample (Poetry!) to indicate a usage trend for the year as a whole; So I’m going to present and share with anyone reading, the Official 2008 kkomp.com Windows Usage Analysis. (Percentages are rounded off to the nearest 1/100th decimal point above.) Behold:-

75% of you Windows users are using Windows XP.

15% of you Windows users are using Windows Vista.

4.3% of you Windows users are using Windows 2K.

1.7% of you Windows users are using Windows Server 2008.

*And the obsolete ones still in use:*

1.6% of you Windows users are using Windows 98 and 98SE

1.5% of you Windows users are using Windows NT4.

0.4% of you Windows users are using Windows ME.

0.4% of you Windows users are using Windows 95.

I’m going to class Windows NT4 as an obsolete operating system. I would rather say obsolescent; but for this analysis I’m classifying it as obsolete. I’m also stating as a fact that Windows 98 and 98SE, ME, and 95, are also obsolete operating systems.

That’s 3.9% of you Windows users who are using an obsolete operating system, or 2.4% if you don’t count NT4 as obsolete.

To those 3.9/2.4%: Did you know that, since your operating system is obsolete, it is a security risk? Microsoft have stopped patching it or issuing critical updates and bug fixes for it. That means that, since it became obsolete, it can harbour the newly-discovered security threats which can affect other Windows computers. It could be part of an advanced botnet already, and you have absolutely no way of knowing what criminal gang has your computer exploited to do their work. It could be being used as a spam server. It could be relaying illegal pornography. It could be standing by to participate in a DDOS attack on a mainstream server. It may be a virus storage facility if you don’t have antivirus or can’t be bothered to update your antivirus: True, the viruses may not be able to affect your computer itself; but you can bet your rear-end that they’re affecting others.

Worst of all you could have the authorities calling and arresting you for criminal cyber activities that you knew absolutely nothing about: How does distributing child pornography sound? Participating in a directed DDOS attack designed to deprive a company of its right to a healthy internet connection, or designed to commit sabotage and theft of company classified secret information by electronic means? Assisting in the distribution of unsolicited illegal advertising? Assisting in the distribution of computer viruses likely to cause a nuisance and inconvenience to the general public on an international level as well as possibly causing millions in losses?

The lawsuits could be colossal and cost you millions and/or your freedom. – And all because you couldn’t be bothered to spend a few bucks/pounds, whatever, on a new operating system and/or a new computer. If you get nicked it’s your own fault; and ignorance is no excuse in the eyes of the (British) law. (Probably most other countries’ legal systems also.)

Is it really worth taking the risk?

If you’re 100% sure you know what you’re doing, are an experienced and knowledgeable geek + internet security expert, and are running the OS as a bit of nostalgia, then good luck to you. Otherwise ditch the obsolete OS, sell the 486 or whatever old heap you’re running it on to a museum, buy new, and stay safe online. Don’t make yourself and others suffer as a result of your own lethargy.

End of lecture. I know I’ve said similar before. This is repetition for emphasis. It is important. Please address the issue  post-haste, for your own sake as much as that of others. To the other Windows users who aren’t using an obsolete OS: Keep it up. – That means keep your antivirus and antispyware updated at all times. Scan your computer regularly. Install all the updates and patches issued by Microsoft. – Why not go check Windows Update right now to see if there’s anything you missed?

To change the subject; I am astonished that 5 times more people are still using Windows XP rather than Windows Vista. I read an article on PCMech.com by David Risley entitled "Is Windows Vista Really a Failure?". In answer to that question just look at the statistics. Go figure!

I’m looking forward to Windows Seven: I think Microsoft have learned their lesson with Vista. (The first public beta comes out early next year BTW.).